General
- Target DOC-OL9SUI.zip
- Size 585B
- Sample260803-qs9qvs1vds
- SHA256 d655f9972cdd26af27f58225a17cdf72c54262c4fc81b4a535404ee2d92c995d
- MD5 073a96a60d2e30db97dadc5684ac7b5c
- SHA1 90742eee6d4f27ae5cabe434e29d07ded1b86447
- SHA512 e5012f7e6674c619d8bdabccaa55b89ea15e3832eb035d8b92d54773aa5aa4f618ba7d635b744fb38f51b045a9f1aa9693d04ac8d2308026497c28e53b61c1c5
- TLSH T175F0E123266354D4DD730C7ABD331DE1065408954813AD361EACFC465A609BD5AE8750
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OL9SUI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OL9SUI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OL9SUI.lnk
- Size 1KB
- SHA256 a13a7b54460d20a6fae7170fe062a443f00aae3a067948bd64ba285072dd4288
- MD5 f24371acb8c28d558e386233fe1d62a4
- SHA1 0d43c9da7f3f02cb2967e27a1700c74beff34491
- SHA512 b6ffa9c5fa0f8e5f8e79bf2d82bb406410c7067fb16c54c9a44c02a78b7ff78b2b1a02b416daade99e4577d8a13f797cb476e7a96ef3c3b7825fa4c66a7fbc92
- TLSH T1E4317B507FF90614F3F79E7394BB6B1085BFB95A8E20C61D0141464C2472A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.